Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa
File:                     3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa (raw, json)
Hash identifier:          lVJItJB1wmM8POPEtsWyZVB7SR+z5ZVxesmXhl2OYUY=
Subject key identifier:   FE:22:31:96:95:D0:66:79:99:12:54:26:82:B1:F4:A5:0B:24:9E:C2
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       479E97611B43C67121AB3A777982B1F2CED50C84
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa
Signing time:             Thu 31 Jul 2025 13:26:48 +0000
ROA not before:           Thu 31 Jul 2025 13:21:48 +0000
ROA not after:            Thu 30 Jul 2026 13:26:48 +0000
asID:                     272548
IP address blocks:        181.232.232.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 16:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9e:97:61:1b:43:c6:71:21:ab:3a:77:79:82:b1:f2:ce:d5:0c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Jul 31 13:21:48 2025 GMT
            Not After : Jul 30 13:26:48 2026 GMT
        Subject: CN=FE22319695D066799912542682B1F4A50B249EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:d8:85:59:cc:0f:d0:f6:d2:8c:d8:08:e8:
                    d9:6b:31:69:bf:fe:a8:6d:09:3e:8d:74:c8:b2:4f:
                    f2:4f:a7:c4:a7:61:e8:82:a0:ac:60:4f:f3:8d:18:
                    41:01:37:f2:d4:6a:0f:8e:85:1b:12:dd:47:6e:4a:
                    29:37:92:a3:0e:39:eb:58:78:3d:8f:18:7c:2d:4a:
                    3c:9d:8b:ef:58:7b:fd:ae:ff:60:49:4b:02:60:bf:
                    1c:6d:01:35:d2:d7:81:8a:57:8c:fc:33:80:67:80:
                    aa:72:bc:05:77:b3:ec:89:fc:a4:70:80:fa:b8:75:
                    87:f7:0d:2c:6a:d1:26:ed:ea:ed:1a:8a:99:64:35:
                    2e:b3:7b:ab:10:20:83:04:f8:99:ad:5f:d4:3f:b6:
                    76:dd:9e:4a:88:ee:65:72:8e:95:c1:ce:05:71:49:
                    19:02:4c:bd:a6:97:1f:62:2a:d1:5f:77:96:8f:9e:
                    9f:be:42:29:07:d8:80:20:9e:b6:36:e3:fb:7b:a3:
                    55:8d:83:f7:78:d0:e4:6a:8d:bb:6d:c8:1c:33:19:
                    b0:73:02:31:41:0f:c8:86:22:75:af:d3:7a:81:f8:
                    7c:69:b4:5c:1f:b9:f9:e9:13:86:49:fd:43:93:a3:
                    a7:93:e8:58:5d:34:fc:d5:02:bc:33:1b:b2:ba:ce:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:31:96:95:D0:66:79:99:12:54:26:82:B1:F4:A5:0B:24:9E:C2
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:f6:05:9e:10:cc:fe:d5:bc:d9:ea:8e:89:f7:b1:e5:11:f2:
         c1:89:23:dd:98:4b:d3:bc:70:b9:02:a0:de:8e:53:5d:ef:23:
         af:82:89:3e:0a:7e:3e:cf:c1:88:fb:1b:97:8f:2c:5e:60:8d:
         a7:b8:11:4b:7b:64:e5:b6:ad:d2:81:00:00:b2:f7:e8:fc:a0:
         24:9a:7e:ef:05:5a:de:e8:5f:b5:ad:89:f3:1b:71:a0:46:ce:
         bd:44:72:40:41:42:0c:fa:a0:25:7e:44:87:d9:c0:2f:5c:77:
         78:8e:29:4f:8c:42:ca:82:c9:b9:e2:84:97:79:be:31:7d:98:
         ec:9c:29:0c:ff:bc:02:db:a0:66:d1:fc:17:02:ad:af:37:c5:
         72:f7:00:af:e1:a1:1b:cf:4e:88:37:93:f6:b0:8d:06:49:26:
         65:b7:bc:37:a6:02:8f:e2:0e:90:a9:9e:a8:20:df:13:ff:29:
         9c:dc:bf:1d:22:68:cc:71:17:81:b6:e0:5f:ee:2e:37:cf:6f:
         0f:b9:e0:c3:de:2f:c8:7c:5b:5e:c1:6d:0f:aa:46:25:83:96:
         11:53:89:10:4c:69:02:1d:ed:10:5b:bf:2e:f1:2e:0c:e7:ce:
         4d:5b:16:fb:c3:2a:23:34:39:6d:0f:b8:b1:67:24:e1:9c:07:
         3f:06:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:39:30 2025 by rpki-client